44
Paperless Recorder with CompactFlash card as storage medium B 70.6570.2.0 Interface Description Modbus Interface 12.06/00434191 cf

cf Paperless Recorder with CompactFlash card as storage ......- master (e. g. PC or PLC) with the appropriate software - connecting cable 2.3 Identifying the interface The paperless

  • Upload
    others

  • View
    0

  • Download
    0

Embed Size (px)

Citation preview

  • Paperless Recorderwith CompactFlash card

    as storage medium

    B 70.6570.2.0Interface Description

    Modbus Interface12.06/00434191

    cf

  • Contents

    1 Introduction 5

    1.1 Preface .......................................................................................................... 5

    1.2 Typographical conventions ......................................................................... 61.2.1 Warning signs ................................................................................................. 61.2.2 Note signs ...................................................................................................... 61.2.3 Presentation ................................................................................................... 6

    2 General 7

    2.1 Applications .................................................................................................. 7

    2.2 System requirements ................................................................................... 7

    2.3 Identifying the interface ............................................................................... 7

    2.4 Communications software PCC ................................................................. 8

    2.5 Visualization software JUMO SVS-2000 ..................................................... 8

    2.6 Setup program .............................................................................................. 8

    3 Connecting the interface 9

    3.1 Connection diagram .................................................................................... 9

    3.2 RS232 .......................................................................................................... 10

    3.3 RS422/RS485 .............................................................................................. 10

    4 Protocol description 11

    4.1 Master-slave principle ............................................................................... 11

    4.2 Transmission mode (RTU) ......................................................................... 11

    4.3 Device address ........................................................................................... 12

    4.4 Timing of the communication ................................................................... 12

    4.5 Structure of the data blocks ...................................................................... 14

    4.6 Distinction Modbus/Jbus .......................................................................... 14

    4.7 Checksum (CRC16) .................................................................................... 15

    4.8 Configuring the interface ........................................................................... 16

    4.9 Password protection .................................................................................. 17

  • Contents

    5 Functions 19

    5.1 Read n bits .................................................................................................. 20

    5.2 Read n words .............................................................................................. 21

    5.3 Write one bit ................................................................................................ 22

    5.4 Write one word ........................................................................................... 23

    5.5 Write n words .............................................................................................. 24

    6 Data flow 25

    6.1 Transmission format .................................................................................. 25

    7 Error messages 27

    7.1 Error handling ............................................................................................. 27

    7.2 Error messages for invalid values ............................................................ 28

    8 Address tables 29

    8.1 Device data ................................................................................................. 29

    8.2 Process data ............................................................................................... 30

    9 Special process data 37

    9.1 External logic inputs .................................................................................. 37

    9.2 Modbus flag ................................................................................................ 37

    9.3 External analog inputs ............................................................................... 37

    9.4 Texts for batch reports .............................................................................. 38

    9.5 Recipe text for batch reports .................................................................... 38

    9.6 Message text for the entry in the event list ............................................. 38

    10 Index 39

  • 1 Introduction

    1.1 PrefacePlease read these operating instructions before commissioning the interface.Keep the operating instructions in a place that is accessible to all users at alltimes.

    Please assist us to improve these operating instructions.

    Your suggestions will be appreciated.

    Phone +49 661 6003-0Fax +49 661 6003-607E-mail [email protected]

    HAll necessary information for operating the interface is contained inthese operating instructions. However, if any problems should stillarise during start-up, you are asked not to carry out any manipula-tions on the unit, as this could endanger your rights under the war-ranty!

    Please contact the nearest subsidiary or the head office in such acase.

    E

    When returning modules, assemblies or components, the regula-tions of EN 61340-5-1 and EN 61340-5-2 “Protection of electronicdevices from electrostatic phenomena” must be observed. Useonly the appropriate ESD packaging for transport.

    Please note that we cannot accept any liability for damage causedby ESD (electrostatic discharge).

    5

  • 1 Introduction

    1.2 Typographical conventions

    1.2.1 Warning signs

    The signs for Danger and Warning are used in the manual under the followingconditions:

    1.2.2 Note signs

    1.2.3 Presentation

    VDanger This symbol is used when there may be danger to personnel if

    the instructions are disregarded or not followed accurately!

    ! Warning This symbol is used when there may be damage to equipmentor data if the instructions are disregarded or not followed accu-rately!

    EWarning This symbol is used where special care is required when han-

    dling components liable to damage through electrostatic dis-charge.

    HNote This symbol is used when your attention is drawn to a special

    remark.

    " Reference This sign refers to further information in other handbooks,chapters or sections.abc1 Footnote Footnotes are notes which refer to certain points in the text.

    Footnotes consist of two parts:

    Markings in the text and the footnote text.

    The markings in the text are arranged as continuous super-script numbers.

    0x0010 Hexadecimalnumber

    A hexadecimal number is identified by being preceded by a“0x” (here: 16 decimal).

    6

  • 2 General

    2.1 ApplicationsThe RS232 or RS422/RS485 serial interfaces are available for communicationwith supervisory systems (e. g. bus system or PC). They can, for example, beused to

    - read out measurements from the recorder

    - read out device and process data from the recorder(for software purposes, the recorder is a device)

    - send texts for batch reporting to the recorder

    - define measurements and logic signals

    2.2 System requirementsThe following items are necessary for operating the serial interface:

    - master (e. g. PC or PLC) with the appropriate software

    - connecting cable

    2.3 Identifying the interfaceThe paperless recorder is supplied with an integral RS232 interface as stand-ard.

    Optionally, it can be supplied with an RS422 or RS485 interface (extra code),but in this case without the RS232 interface.

    Which interface is implemented in the recorder can be requested via the menuDevice info r Interface 20.

    7

  • 2 General

    2.4 Communications software PCCWith the help of the PCC software, measurement data that have been saved inthe memory of the paperless recorder can be read out via the serial interfaceor Ethernet. The data can then be comfortably evaluated by the JUMO PCA3000 evaluation software. We recommend using a transmission rate of 38400baud (baud = bps). The baud rate for the paperless recorder is set by the para-meter Configuration r Interface r Baud rate.

    The data will now be read out under “timing control”. It is not possible to setup an “online” connection between the PC and the paperless recorder.

    2.5 Visualization software JUMO SVS-2000The JUMO SVS-2000 visualization software can be used to read out data fromthe paperless recorder in “online” mode.

    2.6 Setup programThe setup program is used to configure the device. It also provides a teleser-vice function for reading out diagnosis and batch data.

    HOnly one progam at a time can communicate with the devicethrough each interface. So simultaneous communication is onlypossible by using different interfaces, such as reading out the la-test measurement data via the RS 232/422/485, using JUMO SVS2000, while fetching the saved data from the memory via the Ether-net interface by using JUMO PCC and looking at measurementsthrough the teleservice function of the setup program, via the setupinterface on the front panel.

    8

  • 3 Connecting the interface

    3.1 Connection diagram

    Rear viewof thepaperlessrecorder

    Connector 20

    Interface RS232 RS422 RS485

    Connectiondiagram

    2

    1

    3

    4

    5

    6

    7

    8

    9

    HWhen connecting the serial interface, care must be taken not tomix up the connectors 20 and 21. Connector 21 is reserved for theLON or PROFIBUS-DP interface, which is available as an extra.

    9

  • 3 Connecting the interface

    3.2 RS232The handshake connections (RTS, CTS) are not used with the RS232 interface.The RTS connection from the master (CTS on recorder) is ignored, the answeris sent directly from the recorder. The CTS connection of the master (RTS onthe recorder) remains open. If the master evaluates the handshake connec-tions, they have to be bridged in the cable.

    3.3 RS422/RS485The RS422 and RS485 interfaces are changed over automatically by the pa-perless recorder, according to the type of connection (2-wire or 4-wire connec-tion).

    HThe use of a screened and twisted connecting cable is recom-mended.

    10

  • 4 Protocol description

    4.1 Master-slave principleThe communication between a PC (master) and a recorder (slave) using Mod-bus/Jbus takes place according to the master-slave principle in the form of adata-request/instruction-response.

    The master controls the data exchange, the slaves only have a response func-tion. They are identified by their device address. Up to 255 slaves can be ad-dressed.

    4.2 Transmission mode (RTU)The transmission mode used is the RTU mode (Remote Terminal Unit). Dataare transmitted in binary form (hexadecimal) with 8 bits, 16 bits for integersand 32 bits for float values.

    Data format The data format describes the arrangement of a byte transmitted. The dataformat can be as follows:

    HThe paperless recorder can only operate as a slave,and not as a master.

    Master

    Slave 1 Slave 2 Slave n

    Data word Parity bit Stop bit Bit number

    8 bits — 1 9

    8 bits — 2 10

    8 bits even 1 10

    8 bits odd 1 10

    11

  • 4 Protocol description

    4.3 Device address The device address for the slave can bet set in the range from 1 to 254 (deci-mal). Device addresses 0 and 255 are reserved.

    The address is made in binary form (hexadecimal) in the transfer protocol.

    4.4 Timing of the communication

    Charactertransmissiontime

    The start and end of a data block are identified by transmission pauses. Thecharacter transmission time (time for the transmission of one character)depends on the baud rate and the data format used.

    For a data format of 8 data bits, no parity bit and one stop bit, this is:

    character transmission time [msec] = 1000 * 9 bits / (baud rate)

    For other data formats this is:

    character transmission time [msec] = 1000 * 10 bits / (baud rate)

    Example

    HA maximum of 31 slaves can be addressed via the RS422/RS485interface.

    Baud rate [baud] Data format [bit] Character trans-mission time [msec]

    38400 10 0.260

    9 0.234

    19200 10 0.521

    9 0.469

    9600 10 1.042

    9 0.938

    12

  • 4 Protocol description

    Timing scheme A data request runs according to the following timing scheme:

    The master must not make any data requests within t0, t1 and t2, since, if thisis the case, the recorder will either ignore the request or declare it invalid.

    t0 Internal waiting time of the recorder before checking the data re-quest (12.5 — 25msec)

    t1 This time depends on the internal processing.The maximum processing time is 350 msec

    HA minimum response time can be set in the recorder, under themenu item Configuration # Interface. This preset time is the mini-mum time which will be waited before a response is transmitted(0 — 500 msec). If a smaller value is set, then the response timemay be longer than the preset value (because the internal process-ing time is longer) and the recorder answers as soon as the internalprocessing is completed. A preset time of 0 msec means that therecorder responds with the maximum possible speed.

    The minimum response time which can be set is required by theRS485 interface in the master to switch over the interface driverfrom transmitting to receiving. This parameter is not required forthe RS422 or RS232 interface, and should be set to 0 msec.

    t2 Waiting time which the master has to keep before starting a newdata request.

    on RS232 a minimum of 3.5 times the transmissiontime for 1 character (time depends onthe baud rate)

    on RS422/RS485 25msec

    13

  • 4 Protocol description

    4.5 Structure of the data blocksAll data blocks have the same structure:

    Data structure

    Each data block contains four fields:

    Slave address device address of a specific slave

    Function code function selection (read, write, bit, word)

    Data field contains the information:

    -bit address (word address)

    -bit number (word number)

    -bit value (word value)

    Checksum recognition of transmission errors

    4.6 Distinction Modbus/JbusThe Modbus protocol is compatible with the Jbus protocol. The structure ofthe data blocks is identical.

    Slaveaddress

    Functioncode

    Data field ChecksumCRC16

    1 byte 1 byte x byte(s) 2 bytes

    HModbus differs from Jbus in the absolute addresses of the data.The addresses of the Modbus are shifted by one compared withthose of the Jbus.

    Absolute address Jbus address Modbus address

    0 1 0

    1 2 1

    2 3 2

    ... ... ...

    14

  • 4 Protocol description

    4.7 Checksum (CRC16)The checksum (CRC16) serves to recognize transmission errors. If an error isidentified during evaluation, the corresponding device does not answer.

    Calculationscheme

    Example 1 Read out counter 2 (current count = 12345).

    Data request: Read two words, starting at address 0x57 (CRC16 = 0x771E)

    Response: (CRC16 = 0xBB92)

    Word 1 und Word 2 result in the answer 12345.0.

    Example 2 Poll status of relay outputs.

    Instruction: Read one word of address 0x31 (CRC16 = 0xD700)

    Response (CRC = 0x7447):

    Word 1 means that only output 1 is active.

    CRC = 0xFFFFCRC = CRC XOR ByteOfMessageFor (1 to 8)

    CRC = SHR(CRC)if (flag shifted right = 1)then elseCRC = CRC XOR 0xA001

    while (not all ByteOfMessage processed);

    HThe low byte of the checksum is transmitted first.

    14 03 0057 0002 771E

    14 03 04 E400 4640 BB92

    Word 1 Word 2

    14 03 0031 0001 D700

    14 03 02 0001 7447

    Word 1

    15

  • 4 Protocol description

    4.8 Configuring the interfaceThe interface is configured from the keys of the paperless recorder or throughthe setup program.

    Configurationfrom thekeys

    The Configuration menu must be called up first, and the parameter Interfaceselected. The parameters for configuring the interface are now available.

    Configurationvia the setupprogram

    The menu item Edit # Interface (RS232-RS422/485) is available for configura-tion using the setup software.

    Parameter Value/selection Description

    Protocol Configuration➔ Interface

    20 (RS232/RS4xx)➔ Protocol

    MODBUS,JBUS

    Select protocol" Section 4.6 “Distinction Modbus/Jbus”

    Baud rate Configuration➔ Interface

    20 (RS232/RS4xx)➔ Baud rate

    9600 baud,19200 baud,38400 baud

    Select baud rate

    Data format Configuration➔ Interface

    20 (RS232/RS4xx)➔ Data format

    8-1- none,8-1- odd,8-1- even,8-2- none

    Select data format(Data bit-stop bit parity)

    Device address Configuration➔ Interface

    20 (RS232/RS4xx)➔ Device address

    1—254 Select address

    Min. response time Configuration➔ Interface

    20 (RS232/RS4xx)➔ Min. response time

    0—500msec Select minimum response timev Section 4.4 “Timing

    of the communicati-on”

    HThe device address must also be observed when communicatingvia the RS232 interface, even though it is not a bus interface.

    HThese parameters only apply to communication via the RS232 andRS422/485 interfaces. The parameters for communication via thesetup interface are set up in the recorder as follows:

    Protocol: ModbusBaud rate: 9600 baudData format: 8-1-noneDevice address: -Min. response time: 0 msec

    16

  • 4 Protocol description

    4.9 Password protectionRead and write access via the Modbus can be protected, but this is not com-pulsory. If access to the device is to be made possible without password pro-tection, then the rights for “Teleservice: read”, “Teleservice: write” and "Enterbatch texts” must be enabled in the recorder, for the “public” user (defaultrights). This can be done through the setup program (Extras menu).

    If access to the device is only to be made available after previous transmissionof a password, then the rights for “Teleservice: read”, “Teleservice: write” and“Enter batch texts” must be inhibited for the “public” user (default rights). Thiscan also be set up through the setup program (Extras menu). As a result, it willsubsequently be necessary to write the password of the master or user to theaddress 0x011F via the serial interface, before access will be permitted. Com-munication via the interface is then enabled until a period of 30 seconds pass-es without a Modbus instruction being received.

    If an attempt is made to read from or write to the device without having pre-viously transmitted the correct password to the recorder, then the device willrespond with Modbus error code 04.

    Access rights will also be checked for attempts to access the device via theserial interfaces or Ethernet. The following rights are relevant for access viaModbus:

    Address Contents Right required for:

    Read access Write access

    0x0000- 0x0026

    Device information no right required

    not possible

    0x002F- 0x0031

    Logic inputs, alarms, ... Teleservice: read

    not possible

    0x0032- 0x0033

    External logic inputs, control flag

    Teleservice: read

    Teleservice:write

    0x0035- 0x004C

    Analog inputs Teleservice: read

    not possible

    0x0055- 0x005C

    Counters Teleservice: read

    Configuring

    0x005D- 0x00A4

    External analog inputs Teleservice: read

    Teleservice:write

    0x00A6- 0x0113

    Texts for batch report

    no rightrequired

    Enter batch texts

    0x0114- 0x011E

    Message text no rightrequired

    Teleservice:write

    0x012B- 0x01F2

    Recipe for batch report no rightrequired

    Enter batch texts

    17

  • 4 Protocol description

    If access to these Modbus addresses is to be made available without a log-in(for a PLC, for instance), then the necessary rights must be defined as default(standard) rights in the recorder. This can be done in the setup software, viathe menu Extras r Password administration ....

    The recorder is supplied ex-factory with the right “Enter batch texts” includedin the default rights setting, but the rights for “Teleservice: read” and “Teleser-vice: write” are not included.

    If an attempt is made to read from or write to a device without having the cor-responding rights, then the device will respond with Modbus error code 04.

    18

  • 5 Functions

    Measurements and other device or process data can be read out from the re-corder using the functions described below.

    Overviewof functions

    There are no separate areas for bit and word for the system variables. The bitand word areas overlap and can be read and written both as bit area or asword area.

    Addresscalculation

    The word address is calculated as follows:

    word address = base address + variables address

    The bit address is calculated as follows:

    bit address = word address * 16 + bit number

    Example: word address for the measurement of analog input 6:

    word address = 0x0035 + 0x000A = 0x003F

    Example: bit address of the open-collector output:

    bit address = (0x002F + 0x0002) · 0x0010 + 0x0005 = 0x0315

    Functionnumber

    Function

    0x01/0x02 read n bits (max. 256 bits)

    0x03/0x04 read n words (max. 127 words)

    0x05 write one bit

    0x06 write one word

    0x10 write n words (max. 127 words)

    19

  • 5 Functions

    5.1 Read n bitsThis function reads n bits, starting from a defined address.

    Data request

    Response

    Example Read the status of the first 4 logic inputs (process data)" Section 8.2 “Process data”

    Bit address = (base address + process data address) * 16 + bit number= (0x002F + 0x0000) * 0x10 + 0x08 = 0x02F8

    Data request: (CRC16 = 0xBCFB)

    Response: (CRC16 = 13A8)

    In the example above this means that the bits 0x02F8—0x02FF areread.

    8 bits = 1 byte

    For all irrelevant bits (0x02FC—0x02FF) the response is the value 0.

    Slaveaddress

    Function0x01 or 0x02

    Addressfirst bit

    Bit number ChecksumCRC16

    1 byte 1 byte 2 bytes 2 bytes 2 bytes

    Slaveaddress

    Function0x01 or 0x02

    Numberof bytes

    read

    Bit values ChecksumCRC16

    1 byte 1 byte 1 byte x byte(s) 2 bytes

    0A 01 02F8 0004 BCFB

    0A 01 01 0F 13A8

    HIn every case, at least 8 bits (1 byte) are read, irrespective of the num-ber of bits to be read, since the response is made in bytes.

    0x02FF 0x02FE 0x02FD 0x02FC 0x02FB 0x02FA 0x02F9 0x02F8

    20

  • 5 Functions

    5.2 Read n wordsThis function reads n words from a defined address.

    Data request

    Response

    Example Read the first 3 measurement inputs" Section 8.2 “Process data”

    Word address = base address + process data address= 0x0035 + 0x0000 = 0x0035

    Data request: (CRC16 = 7D03)

    Response: (CRC16 = 5047)

    Slaveaddress

    Function0x03 or 0x04

    Addressfirst word

    Wordnumber

    ChecksumCRC16

    1 byte 1 byte 2 bytes 2 bytes 2 bytes

    Slaveaddress

    Function0x03 or 0x04

    Numberof bytes

    read

    Wordvalue(s)

    ChecksumCRC16

    1 byte 1 byte 1 byte x byte(s) 2 bytes

    14 03 0035 0006 D703

    14 03 0C 1999 4348 4CCC 4348 2666 4396 5047

    Measurement 1200.1

    Measurement 2200.3

    Measurement 3300.3

    21

  • 5 Functions

    5.3 Write one bitFor the “write one bit” function, the data blocks for instruction and re-sponse are identical.

    Instruction

    Response

    Example Set the Modbus flag (bit 0) below the base address 0x002F" Section 8.2 “Process data”" Section 9.2 “Modbus flag”

    Bit address = (base address + “Modbus flag” address) * 16 + bit number= (0x002F + 0x0004) * 0x10 + 0x0= 0x0330

    Instruction:

    Response (as instruction):

    Slaveaddress

    Function0x05

    Bit address

    Bit valueXX 00

    ChecksumCRC16

    1 byte 1 byte 2 bytes 2 bytes 2 bytes

    Slaveaddress

    Function0x05

    Bit address

    Bit valueXX 00

    ChecksumCRC16

    1 byte 1 byte 2 bytes 2 bytes 2 bytes

    HFor the bit value,the following applies: FF00= set bit

    0000 = erase bit

    14 05 0330 FF00 CRC16

    14 05 0330 FF00 CRC16

    22

  • 5 Functions

    5.4 Write one wordFor the “write one word” function, the data blocks for instruction and re-sponse are identical.

    Instruction

    Response

    Example Set the first four “external logic inputs”" Section 8.2 “Process data”" Section 9.1 “External logic inputs”

    Word address = base address + “external logic inputs” address= 0x002F + 0x0003 = 0x0032

    Instruction:

    Response (as instruction):

    Slaveaddress

    Function0x06

    Word address

    Word value ChecksumCRC16

    1 byte 1 byte 2 bytes 2 bytes 2 bytes

    Slaveaddress

    Function0x06

    Word address

    Word value ChecksumCRC16

    1 byte 1 byte 2 bytes 2 bytes 2 bytes

    14 06 0032 000B CRC16

    14 06 0032 000B CRC16

    23

  • 5 Functions

    5.5 Write n words

    Instruction

    Response

    Example Write “Text 2 for batch report” (2 words: “ABC” = 0x4142, 0x4300)" Section 8.2 “Process data”" Section 9.1 “External logic inputs”

    Word address = base address + “Text 2 for batch report” address= 0x00A6 + 0x000B = 0x00B1

    Instruction:

    Response:

    Slaveaddress

    Function0x10

    Addressfirst

    word

    Wordnumber

    Bytenumber

    Wordvalue(s)

    Check sum

    CRC16

    1 byte 1 byte 2 bytes 2 bytes 1 byte x byte(s) 2 bytes

    Slaveaddress

    Function0x10

    Addressfirst word

    Wordnumber

    ChecksumCRC16

    1 byte 1 byte 2 bytes 2 bytes 2 bytes

    14 10 00B1 0002 04 4142 4300 CRC16

    14 10 00B1 0002 CRC16

    24

  • 6 Data flow

    6.1 Transmission format

    Integer values Integer values are transmitted over the Modbus in the following format:first the high byte, then the low byte.

    e. g.: Polling the int-value of address 0x0000 if the value 12 (0x000C) iswritten below this address.Request: 010300000001840A (CRC16 = 0x840A)Response: 0103020019798E (CRC16 = 798E)

    Float values Float values are handled on the Modbus with the IEEE-754 standard format(32bits), but with the difference that bytes 1 and 2 are swapped with bytes 3and 4.

    Single-float format (32bits) to standard IEEE 754

    S - sign bitE - exponent (complement to base 2)M - 23bit normalized mantissa

    Modbus-float format

    z. B.: Polling the float value of address 0x0035 if the value 550.0(0x44098000 in IEEE-754 format) is written below this address.Request: 010300350002D405 (CRC16 = D405)Response: 0103048000440920F5 (CRC16 = 20F5)

    After transmission from the device, the bytes of the float value have to beswapped accordingly.

    Many compilers (e. g. Microsoft C++, Turbo C++, Turbo Pascal, Keil C51) re-cord the float values in the following order:

    float value

    Please find out how float values are saved in your application. If required, thebytes have to be swapped accordingly in the interface program, after acqui-ring them from the paperless recorder.

    SEEEEEEE EMMMMMMM MMMMMMMM MMMMMMMM

    byte 1 byte 2 byte 3 byte 4

    Modbus address x Modbus address x+1

    MMMMMMMM MMMMMMMM SEEEEEEE EMMMMMMM

    byte 3 byte 4 byte 1 byte 2

    Address x Address x+1 Address x+2 Address x+3

    MMMMMMMM MMMMMMMM EMMMMMMM SEEEEEEE

    byte 4 byte 3 byte 2 byte 1

    25

  • 6 Data flow

    Texts Texts are transmitted in the ASCII format.

    Since texts are also transmitted word by word (16 bits), an additional 0x00 istransmitted when there is an uneven number of characters (including “\0”).

    e. g.: Polling text of address 0x0002 if the character string“LS cf ” (ASCII-Code: 0x4C,0x53, 0x20, 0x63, 0x66, 0x20, 0x20, 0x20, 0x00) is belowthis address.Request: 0103000200052409 (CRC = 2409)Response: 01030A4C532063662020200000DDBB (CRC16 = DDBB)

    HThe last sign transmitted must always be a “\0” (ASCII code 0x00) asa stop marker.

    26

  • 7 Error messages

    7.1 Error handling

    Error codes If the data request by the master was received by the paperless recorder (with-out transmission error), but could not be processed, the recorder respondswith an error code.Five error codes are available:

    1 invalid function

    2 invalid parameter address

    3 data value outside permissible range of values

    4 slave not ready, or no access rights (password)

    8 write access denied for parameter

    If a bit or word number is read by the master which is larger than the maximumpermitted one, the recorder also sends the error code 2.

    Responseon error

    The function code is linked by OR with 0x80, i. e. the MSB (most significantbit) is set to 1.

    Example Data request: (CRC16 = 1C0B)

    Response: (CRC16 = 8650)

    Special cases The slave does not respond to the following errors:

    - the baud rate and/or data format for master and recorder do not match

    - the device address of the recorder does not correspond to the one in the protocol (in this case, the data request by the master has to be sent again after a time-out of 2sec has elapsed).

    - the checksum (CRC16) is not correct

    - the instruction by the master is incomplete or over-defined

    - the number of words or bits to be read is zero

    Slaveaddress

    FunctionXX OR 80h

    Error code ChecksumCRC16

    1 byte 1 byte 1 byte 2 bytes

    01 09 0000 0001 1C0B

    01 89 01 8650

    27

  • 7 Error messages

    7.2 Error messages for invalid valuesFor measurements the convention is that the error number is represented inthe value itself, i. e. the error number is entered instead of the measurementnumber.

    Example Data request: (CRC16 = D405)

    Response: (CRC16 = 9CC2)

    The measurement (0x48435000 = 200000.0) supplied by analog input 1 indi-cates an underrange condition.

    Error number Error

    200000.0 underrange

    200001.0 overrange

    200003.0 other invalid value

    01 03 0035 0002 D405

    01 03 04 5000 4843 9CC2

    28

  • 8 Address tables

    All process values (variables) together with their addresses, the data type andthe access mode are described below.

    References are as follows:

    R/O read access only

    W/O write access only

    R/W read and write access

    char ASCII character (8 bits)

    byte byte (8 bits)

    int integer (16 bits)

    char xx character string of length xx; xx = length including string stop character “\0”

    Bit x bit No. x

    float float value (4 bytes)

    The process values are divided into logical areas.

    The absolute Modbus address is given by the base address of the appropriatearea and the address offset.

    In the address tables below, bit 0 is always the least significant bit.

    8.1 Device dataBase address: 0x0000

    Address Access Data type Signal designation

    0x0000 R/O int Device group (12)

    0x0001 R/O int Device type (0)

    0x0002 R/O char 9 Device name

    0x0007 R/O char 11 Software version

    0x000D R/O char 13 VdN number

    0x0014 R/O char 21 Serial number

    0x001F R/O char 15 Date/time of last alteration of configuration

    29

  • 8 Address tables

    8.2 Process dataBase address: 0x002F

    Address Access Data type Signal designation

    0x0000 R/O int Group alarms and position of the logic inputs

    R/O bit0 Alarm group 10 = no alarm1 = at least 1 limit infringed in group

    R/O bit1 Alarm group 2

    R/O bit2 Alarm group 3

    R/O bit3 Alarm group 4

    R/O bit4 Alarm group 5

    R/O bit5 Alarm group 6

    R/O bit6-7 not assigned

    R/O bit8 Logic input 1 0 = open / 1 = closed

    R/O bit9 Logic input 2

    R/O bit10 Logic input 3

    R/O bit11 Logic input 4

    R/O bit12 Logic input 5

    R/O bit13 Logic input 6

    R/O bit14 Logic input 7

    R/O bit15 not assigned

    0x0001 R/O int Logic signals

    R/O bit0 CompactFlash card is in the slot (0 = no, 1 = yes)

    R/O bit1 CF card has been stolen (0 = no, 1 = was removed while no user was logged in)

    R/O bit2 Memory alarm: insufficient free internalmemory available. Data must be fetchedon a CF card!

    R/O bit3 Memory alarm: insufficient free internalmemory available. Data must be fetchedvia the serial interface!

    30

  • 8 Address tables

    R/O bit4 Memory alarm: insufficient free memoryavailable on the CompactFlash card!

    R/O bit5 Login status: 0 = no user logged in, 1 = a user is logged in

    R/O bit6 not assigned

    R/O bit7 not assigned

    R/O bit8 Combination alarm0 = no alarm1 = at least 1 limit infringed in the device

    R/O bit9 not assigned

    R/O bit10 Fault condition0 = no fault / 1 = fault

    R/O bit11-15 not assigned

    0x0002 R/O int Logic outputs

    R/O bit0 Relay output 10 = not active / 1 = active

    R/O bit1 Relay output 2

    R/O bit2 Relay output 3

    R/O bit3 Relay output 4

    R/O bit4 Relay output 5

    R/O bit5 Open-collector output0 = not active / 1 = active

    R/O bit6-15 not assigned

    0x0003 R/W int External logic inputs(either from ext. I/O modulesor via Modbus)

    R/W bit0 External logic input 10 = open / 1 = closed

    R/W bit1 External logic input 2

    R/W bit2 External logic input 3

    R/W bit3 External logic input 4

    R/W bit4 External logic input 5

    R/W bit5 External logic input 6

    R/W bit6-15 not assigned

    Address Access Data type Signal designation

    31

  • 8 Address tables

    Base address: 0x0035

    0x0004 R/W int Flag for operating various devicefunctions

    R/W bit0 Modbus flag (control flag)0 = false / 1 = true

    R/W bit1-15 not assigned

    Address Access Data type Signal designation

    0x0000 R/O float Measurement input 1 (analog input 1)

    0x0002 R/O float Measurement input 2 (analog input 2)

    0x0004 R/O float Measurement input 3 (analog input 3)

    0x0006 R/O float Measurement input 4 (analog input 4)

    0x0008 R/O float Measurement input 5 (analog input 5)

    0x000A R/O float Measurement input 6 (analog input 6)

    0x000C R/O float Measurement input 7 (analog input 7)

    0x000E R/O float Measurement input 8 (analog input 8)

    0x0010 R/O float Measurement input 9 (analog input 9)

    0x0012 R/O float Meas. input 10 (analog input 10)

    0x0014 R/O float Meas. input 11 (analog input 11)

    0x0016 R/O float Meas. input 12 (analog input 12)

    0x0018 R/O float not assigned

    0x001A R/O float not assigned

    0x001C R/O float not assigned

    0x001E R/O float not assigned

    0x0020 R/W float Counter value 1

    0x0022 R/W float Counter value 2

    0x0024 R/W float External counter value 1 (from ext. I/O modules)

    0x0026 R/W float Externer counter value 2 (from ext. I/O modules)

    0x0028 R/W float External analog input 1(from ext. I/O modules or via Modbus)

    0x002A R/W float External analog input 2

    Address Access Data type Signal designation

    32

  • 8 Address tables

    0x002C R/W float External analog input 3

    0x002E R/W float External analog input 4

    0x0030 R/W float External analog input 5

    0x0032 R/W float External analog input 6

    0x0034 R/W float External analog input 7

    0x0036 R/W float External analog input 8

    0x0038 R/W float External analog input 9

    0x003A R/W float External analog input 10

    0x003C R/W float External analog input 11

    0x003E R/W float External analog input 12

    0x0040 R/W float External analog input 13

    0x0042 R/W float External analog input 14

    0x0044 R/W float External analog input 15

    0x0046 R/W float External analog input 16

    0x0048 R/W float External analog input 17

    0x004A R/W float External analog input 18

    0x004C R/W float External analog input 19

    0x004E R/W float External analog input 20

    0x0050 R/W float External analog input 21

    0x0052 R/W float External analog input 22

    0x0054 R/W float External analog input 23

    0x0056 R/W float External analog input 24

    0x0058 R/W float External analog input 25

    0x005A R/W float External analog input 26

    0x005C R/W float External analog input 27

    0x005E R/W float External analog input 28

    0x0060 R/W float External analog input 29

    0x0062 R/W float External analog input 30

    0x0064 R/W float External analog input 31

    0x0066 R/W float External analog input 32

    0x0068 R/W float External analog input 33

    0x006A R/W float External analog input 34

    33

  • 8 Address tables

    Base address: 0x00A6

    Base address: 0x0114

    Base address: 0x011F

    Base address: 0x012B

    0x006C R/W float External analog input 35

    0x006E R/W float External analog input 36

    Address Access Data type Signal designation

    0x0000 R/W char 21 Text 1 for batch reports

    0x000B R/W char 21 Text 2 for batch reports

    0x0016 R/W char 21 Text 3 for batch reports

    0x0021 R/W char 21 Text 4 for batch reports

    0x002C R/W char 21 Text 5 for batch reports

    0x0037 R/W char 21 Text 6 for batch reports

    0x0042 R/W char 21 Text 7 for batch reports

    0x004D R/W char 21 Text 8 for batch reports

    0x0058 R/W char 21 Text 9 for batch reports

    0x0063 R/W char 21 Text 10 for batch reports

    Address Access Data type Signal designation

    0x0000 R/W char 21 Message text (for the entry in the event list)

    Address Access Data type Signal designation

    0x0000 W/O char 11 Password

    Address Access Data type Signal designation

    0x0000 R/W char 400 Recipe for batch reports

    34

  • 8 Address tables

    HExternal logic inputs (R/W) and external analog inputs (R/W)can be programmed via the serial interface or connected tothe paperless recorder in the form of modules of the JUMOmTRON automation system.

    For additional information, please refer to Chapter 9 “Specialprocess data”, or to the Operating Instructions 70.6570.2.1(LON interface).

    35

  • 8 Address tables

    36

  • 9 Special process data

    The following chapter describes the special process data in detail:

    - external logic inputs,

    - Modbus flag,

    - external analog inputs and

    - texts for batch reports.

    The addresses of these process data can be taken from Section 8.2 “Processdata”.

    9.1 External logic inputsThe external logic inputs are only available as operating inputs via the serial in-terface when no external mTRON modules are used.

    If the logic inputs are operated via the serial interface, although external mod-ules are connected and active, then the data will only be accepted briefly bythe paperless recorder and will be overwritten by the external module shortlyafterwards.

    Like other logic signals (e. g. logic inputs or alarms), the external logic inputscan be used to operate different recorder functions. For this purpose, it is nec-essary to select “External input 1 — 6" as the corresponding operating signalin the configuration.

    9.2 Modbus flagThe Modbus flag, like other logic signals (e. g. logic inputs or alarms) can beused to operate different recorder functions. In order to be able to use theModbus flag, the entry “Modbus flag” has to be selected when configuring therecorder.

    A conceivable application for using the Modbus flag is the activation of batchreports via the serial interface, for example.

    9.3 External analog inputsThe external analog inputs are only available for transmitting measurements tothe recorder via the serial interface when no external mTRON modules orPROFIBUS interfaces are used.

    If the external analog inputs are operated via the serial interface although ex-ternal modules are connected and active, then the data will only be acceptedbriefly by the recorder and will be overwritten by the external module shortlyafterwards.

    The external analog inputs can be used like normal measurement inputs of therecorder. For this purpose, it is necessary to select “External input 1 — 36” ascorresponding operating signal in the configuration.

    37

  • 9 Special process data

    9.4 Texts for batch reportsFor batch reporting, there are several options for entering texts which can bestored as labels for the batch measurements. One possibility is the transmis-sion of the texts using the serial interface.

    The texts can be sent to the paperless recorder via the base address 0x00A6(offset 0x0000, 0x000B, 0x0016, 0x0021). If less than the maximum possiblenumber of characters is sent per text, then the recorder automatically fills thetext with empty spaces and writes 0x00 in the last position.

    9.5 Recipe text for batch reportsEach batch report includes 400 bytes for a freely-selectable text that can bedownloaded to the recorder via one of the interfaces. This text forms part ofthe batch report and will be generated together with the report. It cannot bedisplayed on the recorder, only on the PC, in the PCA 3000 evaluation pro-gram.

    This text could, for example, be used to save the recipe for a batch.

    9.6 Message text for the entry in the event listIf a text is written to the Modbus address for the message text, then it will beentered into the event list in the recorder.

    HIn order to send a batch text via the interface, the correspondingbatch parameter (e.g. Batches r Line 1 r Contents right column)must be configured to “from interface” in the device.

    If this is not the case and a batch text is sent to a device, then thedevice will respond with the Modbus error code 04.

    38

  • 10 Index

    AAddress calculation 19Applications 7

    BBatch reports 7, 37–38

    CChecksum 15Communications server PCC 8Configuration from the keys 16Configuration via the setup program 16Connecting cable 10Connection diagram 9Control flag 32

    DData structure 14Device address 12

    EError 27Error handling 27Evaluation software 8External analog inputs 32, 37External counter value 32External logic inputs 31, 37

    FFloat values 25Functions, overview of 19

    IInteger values 25Interface type 7

    JJbus 14

    39

  • 10 Index

    MMinimum response time 13Modbus flag 32, 37

    PPCA 8PCC 8Pin assignment 10

    RRead command 20–21

    SSystem requirements 7

    TTexts 26Texts for batch reports 34, 38Timing scheme 13

    40

  • JUMO GmbH & Co. KGStreet address:Moltkestraße 13 - 3136039 Fulda, GermanyDelivery address:Mackenrodtstraße 1436039 Fulda, GermanyPostal address:36035 Fulda, GermanyPhone: +49 661 6003-0Fax: +49 661 6003-607e-mail: [email protected]: www.jumo.net

    JUMO Instrument Co. Ltd.JUMO HouseTemple Bank, RiverwayHarlow, Essex CM20 2TT, UKPhone: +44 1279 635533Fax: +44 1279 635262e-mail: [email protected]: www.jumo.co.uk

    JUMO Process Control, Inc.8 Technology BoulevardCanastota, NY 13032, USAPhone: 315-697-JUMO

    1-800-554-JUMOFax: 315-697-5867e-mail: [email protected]: www.jumo.us

    1 Introduction1.1 Preface1.2 Typographical conventions1.2.1 Warning signs1.2.2 Note signs1.2.3 Presentation

    2 General2.1 Applications2.2 System requirements2.3 Identifying the interface2.4 Communications software PCC2.5 Visualization software JUMO SVS-20002.6 Setup program

    3 Connecting the interface3.1 Connection diagram3.2 RS2323.3 RS422/RS485

    4 Protocol description4.1 Master-slave principle4.2 Transmission mode (RTU)4.3 Device address4.4 Timing of the communication4.5 Structure of the data blocks4.6 Distinction Modbus/Jbus4.7 Checksum (CRC16)4.8 Configuring the interface4.9 Password protection

    5 Functions5.1 Read n bits5.2 Read n words5.3 Write one bit5.4 Write one word5.5 Write n words

    6 Data flow6.1 Transmission format

    7 Error messages7.1 Error handling7.2 Error messages for invalid values

    8 Address tables8.1 Device data8.2 Process data

    9 Special process data9.1 External logic inputs9.2 Modbus flag9.3 External analog inputs9.4 Texts for batch reports9.5 Recipe text for batch reports9.6 Message text for the entry in the event list

    10 Index